What Changed
Fixed ARM template deployment failure in the RFI-confirm-EntraID-risky-user playbook by removing stale references to the deleted Check_if_AD_Identity_Protection_risky_users_list_contains_the_user action.
Security Impact
The affected playbook was completely non-deployable since v1.2 due to ARM template validation failures. Deployments attempting to install this playbook from the v3.0 folder experienced InvalidTemplate errors at deploy time, preventing installation of identity protection automation.
Per PR discussion: The deleted action references remained in both response actions after the action was removed in v1.2, causing template validation to fail when referencing non-existent workflow steps.
This fix restores the playbook deployability for organizations using Recorded Future Identity Intelligence to automate Entra ID risky user confirmation workflows.
Affected Files
Solutions/Recorded Future Identity/Playbooks/v3.0/RFI-confirm-EntraID-risky-user/azuredeploy.json